CVE-2013-3407
Published Nov 18, 2013
Last updated 11 years ago
Overview
- Description
- The web interface in Cisco Server Provisioner 6.4.0 Patch 5-1301292331 and earlier does not require authentication for unspecified pages, which allows remote attackers to obtain sensitive information via a direct request, aka Bug ID CSCug65664.
- Source
- ykramarz@cisco.com
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-264
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:server_provisioner:*:patch_5-1301292331:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F7277BFB-664B-4FA3-8726-BCA84F4E9511",
"versionEndIncluding": "6.4.0"
},
{
"criteria": "cpe:2.3:a:cisco:server_provisioner:6.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F5692099-00C5-4B44-8CC5-6C1798588163"
},
{
"criteria": "cpe:2.3:a:cisco:server_provisioner:6.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EAFA0793-3507-427D-AD95-2490D57199F8"
},
{
"criteria": "cpe:2.3:a:cisco:server_provisioner:6.4.0:patch_1204040128:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9AFA8006-D6F8-4D46-8406-310BD3385A21"
},
{
"criteria": "cpe:2.3:a:cisco:server_provisioner:6.4.0:patch_2-1112122225:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BA23EF0D-25F4-4F37-83A8-12CD721047E5"
},
{
"criteria": "cpe:2.3:a:cisco:server_provisioner:6.4.0:patch_3-1208021049:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B03AC25B-B2F2-4970-82A0-8B93A945D083"
}
],
"operator": "OR"
}
]
}
]